LGPD – LAW No. 13,709/2018

322bet Privacy Policy – Protecting Your Data

A 322bet takes your data privacy very seriously. This document clearly explains what we collect, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with Brazil's Lei Geral de Proteção de Dados (LGPD). No fine print, no inaccessible legal language.

Last updated: January 2026 Brazilian Portuguese Version LGPD Compliant
SSL 256-bit
LGPD Compliance
Protected Data
100% in Portuguese
DPO Available 24/7

How 322bet Handles Your Data

Six pillars of our privacy policy explained in plain language

Minimal and Necessary Collection

A 322bet collects only the data strictly necessary to operate the platform: identification, age verification, payment processing in BRL, and fraud prevention. Nothing beyond what the law and operations require.

Encryption Across All Transmissions

All communication between your device and the servers of 322bet uses 256-bit SSL encryption. Payment data via Pix, boleto bancário, and credit or debit card never travels across the network in plain text.

No Sale of Data to Third Parties

A 322bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only with strictly necessary operational partners and always under contractual data protection clauses.

Your Rights Under the LGPD

As a data subject, you have the right to access, correct, port, delete, and withdraw consent for any data that 322bet holds about you — all in accordance with Law No. 13.709/2018.

Defined Retention Period

Your data is not stored forever. The 322bet sets clear retention periods for each data category — based on legal, regulatory, and operational obligations — and deletes data once those periods expire.

Dedicated & Accessible DPO

A 322bet has a dedicated Data Protection Officer (DPO), reachable at privacidade@322bet.best. All data requests receive a response within 15 business days.

Your 8 Rights as a Data Subject

The LGPD gives you real control over your personal information at 322bet

Access

Request a copy of all personal data 322bet holds about you at any time, with details on how it is being used.

Correction

Request the correction of incomplete, inaccurate, or outdated information in your 322bet account at any time.

Deletion

Request the deletion of your personal data processed on the basis of consent, subject to mandatory legal retention periods.

Portability

Receive your data in a structured, machine-readable format for transfer to another service, in accordance with ANPD regulations.

Consent Withdrawal

Withdraw consent for processing based on this legal basis at any time, without affecting any processing already carried out.

Information

Know exactly which public and private entities 322bet shares your data with — full transparency, no exceptions.

Blocking

Request the temporary restriction of processing for unnecessary or excessive data while awaiting review of a request.

Objection

Object to processing carried out under legal bases other than consent, where such processing is inconsistent with the LGPD.

To exercise any of these rights, contact our DPO: privacidade@322bet.best

This Privacy Policy describes the practices of 322bet in the processing of personal data belonging to registered users and visitors of the platform. By creating an account or using any available service — Sports Betting, Live Casino, slots, crash games, Pix deposits, or any other feature — you confirm that you have read and understood this policy. If you have any questions, please contact our Data Protection Officer (DPO) before registering.

1Who Is the Data Controller

The controller responsible for processing your personal data is 322bet, a Sports Betting and online casino platform operated for the Brazilian market. The controller is responsible for defining the purpose and means of processing data collected in connection with the services of 322bet.

For questions related to this Privacy Policy or the exercise of your rights as a data subject, the official channel to reach the Data Protection Officer (DPO) is the email privacidade@322bet.best. The response deadline is up to 15 business days, as required by the LGPD.

This policy applies to all services provided by 322bet accessed by residents in Brazil. If you access the platform from outside Brazil, the same protections apply, but the governing legislation remains Brazilian law, in particular the LGPD (Law No. 13,709/2018).

2Data We Collect

A 322bet collects personal data at different points during your interaction with the platform. The categories of data collected are:

  • Identification data: full name, CPF, date of birth, email address, and mobile number provided at registration;
  • Address data: full residential address including zip code, collected for identity verification and regulatory compliance purposes;
  • Payment data: information required to process deposits and withdrawals via Pix, boleto bancário, credit and debit card (Visa and Mastercard), PicPay, Mercado Pago, and TED — including Pix keys, partial card data, and bank details for TED transfers through your bank (Nubank, Itaú, Bradesco, Banco do Brasil, and others). Full card details are never stored on 322bet's servers;
  • Platform usage data: betting history, games accessed, gaming sessions, bonuses used, browsing preferences, and interface interactions;
  • Technical data: IP address, browser type and version, operating system, device identifier (for fraud prevention), approximate IP-based location, and cookie data;
  • Communications: messages exchanged with support via live chat, emails sent, and customer service history.

We do not collect sensitive personal data — such as health information, racial or ethnic origin, religious beliefs, political opinions, or sexual orientation — except where strictly necessary for responsible gambling programs (such as information voluntarily provided by the user when requesting self-exclusion).

A 322bet collects only the minimum data necessary to operate the platform securely. We do not request data we do not need. If you receive an unusual data request in the name of 322bet, contact support immediately — it may be fraud.

3How We Use Your Data

The data collected by 322bet are used for the following purposes:

  • Account creation and management: identity verification, age confirmation (18+), prevention of duplicate accounts, and user profile management;
  • Financial transaction processing: deposits via Pix, boleto bancário, card, PicPay, Mercado Pago, and TED, and processing of withdrawals in BRL;
  • Provision of betting and casino services: records of sports bets, slots sessions, Live Casino, crash games, and all other games available on the platform;
  • Fraud and money laundering prevention: monitoring of suspicious activity, verification of compliance with COAF guidelines, and reporting to authorities when required by law;
  • Customer support: live chat support, resolution of questions and disputes, communication history;
  • Marketing communications: sending emails about promotions, Brasileirão bonuses, slots tournaments, and news — only with your express consent, and you can opt out at any time;
  • Platform improvement: analysis of usage patterns to optimize the experience on mobile and desktop, identify bugs, and prioritize new features;
  • Responsible gambling: monitoring of gambling patterns to identify signs of problem gambling and trigger alerts or controls in line with user-defined limits.

Your data is never used for purposes incompatible with those listed above without new explicit consent or an appropriate legal basis.

4Legal Basis for Processing

All data processing operations carried out by 322bet is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

Purpose of Processing Legal Basis Legal Basis
Account creation and management Contract Performance of the platform's terms of use
Payment processing Contract Contract performance and tax legal obligation
Identity verification and KYC Legal Obligation LGPD art. 7º, II — Anti-corruption and AML/CFT legislation
Fraud Prevention Legitimate Interest Platform and user protection
Sending marketing communications Consent Express opt-in at registration or in settings
Usage analysis for product improvement Legitimate Interest User experience improvement
Responsible gambling programs Legal Obligation Sports betting regulation in Brazil

When processing is based on consent, you have the right to withdraw it at any time, without affecting any processing that took place while consent was active.

5Data Sharing with Third Parties

A 322bet does not sell your personal data. Data sharing only occurs in the situations listed below, all subject to contractual protections equivalent to those in this policy:

  • Game providers: Evolution Gaming, Pragmatic Play, Ezugi, PG Soft, Hacksaw Gaming, and other partner providers receive only the minimum data required to authenticate the gaming session (session ID, balance). No personally identifiable data such as name or CPF is transmitted to these providers unless there is a specific technical requirement;
  • Payment processors: transaction data required to process Pix, boleto, card, PicPay, Mercado Pago, and TED is transmitted to the financial institutions and payment gateways through which 322bet operates, all of which are subject to Banco Central do Brasil regulations;
  • Identity verification service providers: KYC (Know Your Customer) partners that assist with document verification and fraud prevention, operating under data processing agreements with confidentiality clauses;
  • Competent authorities: data may be shared with the Ministério Público, COAF, Receita Federal, Banco Central, and other Brazilian authorities when required by law, court order, or regulatory investigation;
  • Analytics and infrastructure services: cloud providers and security analysis tools that process data on behalf of 322bet, under data processing agreements in compliance with the LGPD.

Some game providers and infrastructure service providers may be based outside Brazil. In such cases, 322bet ensures that international data transfers take place with adequate safeguards, such as standard contractual clauses or on the basis of recognized adequacy decisions, in accordance with Article 33 of the LGPD.

6Cookies and Tracking Technologies

A 322bet uses cookies and similar technologies for platform functionality, security, and usage analytics. The types of cookies used are:

  • Essential cookies: required for the basic operation of the platform — maintaining authenticated sessions, language preferences, and security settings. They cannot be disabled without impacting your use of the platform;
  • Security cookies: used to detect suspicious activity, prevent fraud, and identify devices for account protection. They include technical device identifiers that do not allow for direct personal identification;
  • Performance and analytics cookies: collect data on how users navigate the platform — pages visited, session duration, errors encountered — to identify improvements. Data is anonymized before analysis;
  • Preference cookies: store user preferences such as favorite games, default payment method, and notification settings.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning correctly — particularly login and bet processing. Performance and preference cookies can be disabled without affecting core functionality.

A 322bet does not use third-party tracking cookies for behavioral advertising on other sites. No social media tracking pixels are used without the user's explicit consent.

7Data Retention and Deletion

A 322bet retains your personal data only for as long as necessary to fulfill the purposes described in this policy and applicable legal obligations. Retention periods by category are:

  • Registration and identity verification data: retained for a minimum of 5 years after account closure, in compliance with anti-money laundering (AML) requirements and Brazilian financial regulations;
  • Financial transaction history: retained for a minimum of 5 years for tax and regulatory purposes, in accordance with the Brazilian Tax Code;
  • Betting history and gaming sessions: retained for 2 years for dispute resolution and internal audit purposes, after which they are anonymized for statistical use;
  • Customer support communications: retained for 2 years for reference in future disputes and to support quality improvement in customer service;
  • Cookie and session data: session cookies expire when the browser is closed; persistent cookies have a maximum lifespan of 12 months and are only renewed upon active interaction.

Once retention periods expire, data is securely deleted from the systems of 322bet or irreversibly anonymized. You may request early deletion of data processed on the basis of consent, subject to mandatory minimum legal retention periods.

Even after closing your account at 322bet, some data must be retained due to legal obligations. This data is kept under restricted access and used exclusively for regulatory compliance — never for any commercial purpose.

8Data Security

A 322bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures currently in place include:

  • 256-bit SSL/TLS encryption on all communications between client and server — the same standard used by Brazil's largest banks, including Nubank, Itaú, Bradesco, and Banco do Brasil;
  • Encryption at rest for sensitive data stored on servers, including payment data and verification documents;
  • Multi-factor authentication for administrative access to internal systems;
  • Access controls based on the principle of least privilege — each team member can only access the data necessary for their specific role;
  • Continuous security monitoring and real-time anomaly detection;
  • Penetration testing and periodic security audits conducted by independent specialized firms;
  • An incident response plan with defined procedures for notifying the ANPD (Autoridade Nacional de Proteção de Dados) within 72 hours in the event of a breach that poses significant risk to data subjects.

In the event of a security incident that may affect your data, 322bet will notify you at your registered email with information about what occurred, which data was affected, and the steps taken to mitigate the risks — all within the timeframes required by the LGPD.

No system is 100% invulnerable. Despite all security measures in place, no company can guarantee the absolute security of data. For this reason, we also recommend that you use strong, unique passwords for your account at 322bet and enable two-factor authentication where available.

9How to Exercise Your Rights under the LGPD

To exercise any of your rights as a data subject under the LGPD, simply contact the DPO at 322bet by email at privacidade@322bet.best. The process is straightforward:

  • Identification: provide your full name and the CPF linked to your account so we can verify your identity before processing the request — a necessary measure to protect your privacy against fraudulent requests;
  • Description of the request: clearly describe what you are requesting — data access, correction of specific information, deletion, portability, or another request;
  • Response time: 322bet responds to all requests within 15 business days, as required by the LGPD. Complex requests may require additional time, but you will be notified within the first 15 days;
  • Free of charge: all requests to exercise data rights are free of charge. 322bet may only charge a fee in cases of repetitive and manifestly unfounded requests, as permitted under the LGPD.

If your request is not resolved to your satisfaction, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.

10Contact the Data Protection Officer (DPO)

A 322bet has appointed a Data Protection Officer (DPO) as required by Article 41 of the LGPD. The DPO is the official point of contact for all communications relating to privacy and personal data protection.

You can contact the DPO of 322bet to:

  • Exercise any of your rights as a data subject;
  • Clarify questions about how your data is handled;
  • Report concerns about how your data is being handled;
  • Request additional information about this policy;
  • Revoke previously granted consent for receiving marketing communications.

DPO email: privacidade@322bet.best
General support: contato@322bet.best or 24-hour live chat
Response time: up to 15 business days for privacy requests

This Privacy Policy may be periodically updated by 322bet to reflect changes in data handling practices, applicable legislation, or the services offered. Material changes will be communicated via your registered email at least 7 days before taking effect. The date of the last update is always shown at the top of this page. We recommend reviewing this policy periodically.

Privacy in Practice: What It Means for You at 322bet

When you create an account at 322bet, you fill in your name, CPF, email, and phone number. This information does not exist in the system simply so you can bet on the Brasileirão — it serves a specific legal purpose. The CPF ensures there is only one account per person, preventing bonus abuse and fraud. The email is the official communication channel for transaction confirmations and account recovery. The phone number may be used for two-factor verification when enabled. Each piece of data has a purpose, and 322bet does not collect anything beyond what it actually needs.

When you make a Pix deposit to bet on Flamengo x Palmeiras or play slots at night, the transaction data passes through a payment processor operating under Banco Central do Brasil regulations. The 322bet receives payment confirmation only — not your full bank account details. Credit and debit card data is tokenized, meaning the system stores a representative code rather than your actual card number. This means that even if an unauthorized access attempt were made on the servers, the most sensitive financial data would not be exposed in plain text.

Your betting history — every prediction on a Copa do Brasil match, every Live Casino session, every slots spin — is recorded in our system. This record exists for two main reasons: dispute resolution (if you report an issue with a bet, we need to see what happened) and regulatory compliance. Brazilian law requires financial platforms to retain transaction records for a minimum of 5 years. After that period, usage data is anonymized and used only for aggregate statistical purposes — you become a number in a table, not an identifiable individual.

The responsible gambling system at 322bet uses gaming behavior data — session frequency, average bet amount, time-of-day patterns — to identify signs of problem gambling. If you set deposit limits or enable session alerts, those settings are stored in your profile. If a behavior pattern triggers an internal alert, the responsible gambling team may reach out to check in with you. This monitoring is a regulatory requirement and a player protection tool — not commercial surveillance.

As for marketing communications — emails about Brasileirão round promotions, new slots, or weekly cashback — you will only receive these if you gave consent during registration or in your account settings. Opting out is easy: just click "unsubscribe" in any email or update your preferences in the settings. The 322bet does not use your betting history to build consumer profiles for third parties, nor does it sell data to advertising companies. Your bets stay between you and the platform.

256-bit SSL encryption ensures that no data transmitted between your phone or computer and the servers of 322bet can be intercepted in transit. This applies to bets, login, Pix withdrawals, and any other interaction with the platform. It is the same standard that protects transactions at Nubank, Itaú, and Bradesco — not marketing, but security architecture.

If you ever decide to close your account at 322bet, you may request the deletion of data processed on the basis of consent. Some data must be retained by legal obligation even after account closure — primarily financial records for the period required by tax and anti-money laundering legislation. However, that data is kept under restricted access, used for no commercial purpose, and you will receive clear information about which data remains and for how long.

The Autoridade Nacional de Proteção de Dados (ANPD) is the Brazilian government body responsible for overseeing LGPD compliance. If you believe that 322bet did not adequately handle a rights request, you have the right to file a complaint directly with the ANPD — this right is guaranteed by law, and 322bet fully respects the authority of the regulatory body.

Your Data Protected, Your Bet Secure

Sign up with 322bet knowing your personal and financial data is protected by 256-bit SSL encryption and full LGPD compliance.

Privacy Questions at 322bet

Frequently asked questions about data protection and your rights as a data subject

No. 322bet does not sell, rent, or share your personal data with third parties for commercial purposes. Data sharing occurs only with strictly necessary operational partners — payment processors for Pix and card transactions, game providers for session authentication, and competent authorities when required by law. All such sharing has an appropriate legal basis and is governed by contracts with data protection clauses.

To request deletion of your data, contact the DPO at privacidade@322bet.best with your full name, CPF, and a description of your request. A response will be provided within 15 business days. Please note that some data must be retained by legal obligation even after a deletion request — such as financial records, which must be kept for at least 5 years under Brazilian tax law. That data is kept under restricted access and is not used for any commercial purpose.

Payment data is transmitted with 256-bit SSL encryption and processed by payment gateways regulated by the Banco Central do Brasil. Full credit and debit card details are never stored on 322bet's servers — only representative tokens generated by the payment processors. For Pix, the Pix key used for withdrawals is stored in encrypted form. No payment data is accessible to 322bet staff without a specific need and an access log entry.

Yes, at any time. Click the "unsubscribe" link in the footer of any marketing email received from 322bet, or go to the notification settings in your account and turn off promotional communications. The opt-out is processed immediately — you may receive one or two more emails while the technical processing completes, but none after that. Unsubscribing from marketing does not affect transactional emails necessary for account operations (deposit confirmations, withdrawal notifications, security alerts).

In the event that 322bet ceases operations, users would be notified at least 30 days in advance by email. Any available account balance would be returned via Pix before the shutdown. Personal data would be handled in accordance with mandatory legal retention periods and, once those periods expire, securely deleted. No sale or transfer of data to third parties for commercial purposes would occur — any transfer of assets involving data would comply with the LGPD and require prior notice to data subjects.

Betting history is used internally to: resolve disputes, meet regulatory obligations, improve the platform (in anonymized and aggregated form), and — with your consent — deliver relevant personalized promotions, such as enhanced odds on the Brasileirão if you regularly bet on football. Your history is never shared with external advertisers or used to build advertising profiles for third parties. You can withdraw consent for marketing personalization in your account settings at any time.
LGPD Compliance

A 322bet fully complies with the General Data Protection Law (LGPD – Law No. 13,709/2018). To exercise your rights as a data subject or for questions about this policy, please contact our DPO at privacidade@322bet.best. Also read our Terms and Conditions to understand the platform's general terms of use.

Responsible Gambling

Privacy and player care go hand in hand at 322bet.

Deposit Limits

Set daily, weekly, and monthly deposit limits in your account settings. Once a limit is set, it can only be increased after a 7-day waiting period from the date of the request.

Session Control

Automatic session time alerts to help you stay in control. Play responsibly and within your personal and financial limits.

Self-Exclusion

Temporary or permanent exclusion available at any time through 24/7 support. Processed immediately, with full privacy and no questions asked.

+18 Required

CPF verification is mandatory to confirm you are of legal age. This platform is strictly for users aged 18 and over, no exceptions.

Português